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IN THE CLAIMS: 

1 . (Currently amended) A method for i nt e grating sharing registry information 
among a plurality of heterogeneous s ervers- comprising the steps of: 

creating a database registry such that registry information is separated into first 
registry information that is common to a plurality of applications running: on said 
plurality of hetero geneous servers and second registry information that is specific to ones 
of said plurality of applications, wherein said first registry information is stored in a 
common registry and said second registry information is stored in respective second 
registries associated with respective applications; 

tranamitting, from a first qcrvor within the plurality of oorvoro, - an auth e ntication 
r e qu e st to authenticat e a uacr in on existing database registry; 

responsive to receivin g the authentication arequest to authenticate the uoor in the 
existi ng a user in said database registry, constructing , by tho firat oorvor, a credential of 
the user; and 

Qoooqoing a r e source from o s e cond o e rvor within tho plurality of s e rv e rs 
selectively allowing access to a resource b ased on the credential of the user and a 
protection policy applied to the resource in an object name space associated with [['the]] a 
first serve r of said plurality of users . 

2. (Cancelled) 

3. (Cancelled) 

4. (Cancelled) 

5. (Currently amended) The method as recited in claim 1 , wherein the application 
oonstruoto a saidcredential of the use r is constructed using a user identifier and a user 
password. 

6. (Currently amended) The method as recited in claim 1 , wherein registry 
information in th e e xisting said database registry includes at least one of user registry 
information and group registry information. 
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7. (Currently amended) The method as recited in claim 1, wherein integrating the 
plurality of oorvorg is integrated with tho age of access to the database registry must go 
througha n adapter. 

8. (Original) The method as recited in claim 7, wherein the adapter is a user registry 
adapter. 

9. (Currently amended) The method as recited in claim 1, ftirther comprising: 
storing a definition of the user in said database registry, [^databas e a s sociat e d with 

tho sooond norvor. 

1 0. (Currently amended) The method as recited in claim 1 , further comprisingjhe 
Step of ; creatinp on application speoifio database - in - thfl nonnnrl n a rv a r; nnd protecting 
application specific data r e quir e d for an opomtion of th e s e cond s e rv e r from unauthorized 
users . 

1 1 . (Currently amended) The method as recited in claim 1 , wherein the application 
sp e cific database said respective second database is a meta-data database. 

1 2. (Original) The method as recited in claim 1 , wherein the resource is a Web 
resource. 

13. (Currently amended) The method as recited in claim 1 ? further comprising: 
responsive to a request to disable a user from accessing a given resource on th e 

s e cond senrvor , receiving the disable request [[by]] at an adapter integrating the plurality 
of servers; and 

removing a definition associated with the user from a database associated with the 
second server. 

14. (Currently amended) The method as recited in claim 1, further comprising: 
responsive to a request to disqualify a user from accessing a given resource on tho 

s e cond oorvor, receiving the disqualification request [[by]] at an adapter integrating the 
plurality of servers; 

removing a definition associated with the user from a first database associated 

Page 5 of 13 
Fichtner et al. - 09/895,230 



PAGE 7/15 * RCVD AT 511012005 4:56:1 1 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/2 1 DN1S:8729306 * CSID:9723857766 1 DURATION (mm-s$):04-00 



05/10/2005 15:57 9723857766 YEE & ASSOCIATES, PC PAGE 



with the second server; and 

removing a definition associated with the user from a second database associated 
with the second server. 

15. (Original) The method as recited in claim 14, wherein the first database is a 
registry database and the second database is a on eta-data database. 

16. (Currently amended) A system, comprising: 
a bus system; 

a memory, including a set of instructions, connected to the bus system; and 
a processing unit, competed fr? said memory and \o a database registry 
constructed such that registry information is separated into first registry information that 
is_ common to a plurality of applications running on said plurality of heterogeneous 
servers and second registry information that is specific to ones of said plurality of 
a pplications, wherein said first registry information is stored in a common registry and 
said second registry information is stored in respective second registries associated with 
respective applications: 

, including at lonat ono proc e s s or, wh e r e in th e processing unit e x e cut e s th e g e t of 
in s tructions to transmit, from a firqt oorvor within a plurality of gorvora, an authentication 
r e qu e st to auth e nticat e a uoer in an cxiating database registry. 

responsive to receiving tho authentication arequest to authenticate the uoor in tho 
e xistin g a user in said d atabase registry, constructin g, but tho first oorvor, a credential of 
the user; and 

acc e ssing a resource from a oooond oorv e r-w i thm - tho plurality of gorvoro 
selectively allowing^access to a resource b ased on the credential of the user and a 
protection policy applied to the resource in an object name space associated with [[the]] a 
first serve r of said plurality of servers . 

17. (Currently amended) A system for integrating a plurality of servers, comprising: 
a database registry constructed such that registry information is separated into 

first registry info rmation that is common to a plurality of applications running on said 
pl urality of heterogeneous servers and second registry information that is specific to ones 
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of said plurality of applications, wherein said first registry information is stored in a 
common registry and said second registry information is stored in respective second 
registries associated witb respective applications: 

transmitting means for trnnomittingti from a firot oorver within th e plurality of 
server$y-an auth e ntication r e qu e st to - outhentioat e a uoer in an e xisting, databas e r e gistry; 

constructing means, responsive to receiving the - autb e mktat i on a request to 
authenticate th e user in tho existing a user in said d atabase registry, for constructingrby 
the firot oorvor, a credential of the user; and 

accessing means for accessing a resourc e from a oeoond server within th e plurality 
of servere selectively allowing access to a resource b ased on the credential of the user and 
a protection policy applied to the resource in an object name space associated with [[the]] 
a first serve r of said plurality of servers . 

1 8. (Currently amended) A computer program product stored in a computer-readable 
medium for i n te grating sharing registry information among a plurality of heterogeneous 
servers, comprising: 

instructions for creating a database registry such that registry information is 
separated into first registry fafPTOatip n tfrgt 19 CQmm ffl ft) ft phffrifty Qf flppjjfcetijQng 
running on $aid plurality Qf toteyoseneous server^ and second yegisti^ jnfo^atioq th^ isj 
specific to ones of said plurality of applications, wherein said first registry information is 
stored in a common registry and said second registry information is stored in respective 
second registries associated with respective applications; 

inotruotions for transmitting, from a first oorvor within tho plurality of oorvoro, on 
a u thentication requ e st to authenticate a user in on existing database registry; 

instructions, responsive to receiving tho - authontication arequest to authenticate 
th e- us e r in th e e xisting amser in said d atabase registry, for constructin g, -b y - ih e first 
sorvor, a credential of the user; and 

instructions for acc e s s ing a r e source from a sooond oorvor within tho plurality of 
servers selectively allowing access to a resource based on the credential of the user and a 
protection policy applied to the resource in an object name space associated with [[the]] a 
first serve r of said plurality of users . 
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19. (Cancelled) 

20. (Cancelled) 

21. (Cancelled) 

22. (Currently amended) The computer program product as recited in claim 1 8, 
wherein the application constructs a said c redential of the use r is constructed using a user 
identifier and a user password 

23. (Currently amended) The computer program product as recited in claim 1 8, 
wherein registry information in the e xisting said database registry includes at least one of 
user registry information and group registry information, 

24. (Currently amended) The computer program product as recited in claim 1 8, 
whoroin integrating th e plurality of oorvora is integrated with th e uo e of access to the 
database registry must go through a n adapter. 

25. (Original) The computer program product as recited in claim 24, wherein the 
adapter is a user registry adapter. 

26. (Currently amended) The computer program product as recited in claim 1 8, 
further comprising: 

instructions for storing a definition of the user in said database registry, o database 
associated with th e- s e cond servor. 

27. (Currently amended) The computer program product as recited in claim 1 8, 
further comprising: 

instructions for cr e ating an - applioation spooifiodatabas e in th e s e cond server; and 
instructions for protecting application specific data r e quir e d for an operation of 
the pooond qorvcr from unauthorized users , 

28. (Currently amended) The computer program product as recited in claim 1 8, 
wherein the application spooifio database said respective second database is a meta-data 
database. 
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29. (Original) The computer program product as recited in claim 1 8, wherein the 
resource is a Web resource. 

30. (Currently amended) The computer program product as recited in claim 1 8, 
further comprising: 

instructions, responsive to a request to disable a user from accessing a given 
resource on th e seoond oorvor , for receiving the disable request [[by]] at an adapter 
integrating the plurality of servers; and 

instructions for removing a definition associated with the user from a database 
associated with the second server. 

3 1 . (Currently amended) The computer program product as recited in claim 1 8, 
farther comprising: 

instructions, responsive to a request to disqualify a user from accessing a given 
resource on the oocond se rv e ? , for receiving the disqualification request [[by]] at an 
adapter integrating the plurality of servers; 

instructions for removing a definition associated with the user from a first 
database associated with the second server; and 

instructions for removing a definition associated with the user from a second 
database associated with the second server. 

32. (Original) The computer program product as recited in claim 3 1 , wherein the first 
database is a registry database and the second database is a meta-data database. 
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